$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1d173c7d-4cc3-3f45-8662-a713821860f7.roa File: 1d173c7d-4cc3-3f45-8662-a713821860f7.roa (raw, json) Hash identifier: vczTdIf8Py/z0im9LbBxLAgUxeYR2C8fTO3qaHl+zjA= Subject key identifier: 17:5A:06:C4:D0:41:53:8A:72:14:83:DE:DE:28:C1:DD:D9:1C:66:3F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AD93670750F68759F2225EE80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1d173c7d-4cc3-3f45-8662-a713821860f7.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 396609 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:70:75:0f:68:75:9f:22:25:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=610d1322-8358-49dc-8233-2e00d5ddf3ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:87:ac:6b:66:41:49:70:14:ca:bb:a3:bf:74: 78:74:c9:2d:f5:76:2d:ac:5a:e3:fc:b4:92:b7:6b: b6:d1:31:de:5a:49:5f:5b:d1:e2:41:38:90:32:20: e9:37:6a:34:88:2d:3d:21:5f:c3:da:a2:94:2c:b0: 4c:00:64:7e:63:6d:c6:ce:ba:37:40:b1:e4:44:4a: 05:ae:72:cb:f0:4c:4e:14:ee:86:ab:bf:e1:0d:0c: 5f:fe:42:6d:7f:b0:4d:07:f6:b0:09:27:d1:08:73: 22:2b:80:b3:ce:6a:e9:85:b5:8f:4f:ed:ee:2d:49: 9b:84:f7:f3:e4:25:79:ac:f5:47:07:c2:43:ed:bf: b1:d1:e5:1d:ce:a3:5b:47:99:1f:5f:87:ed:76:42: 2b:74:25:2e:4b:e2:64:7e:b6:01:bd:c5:db:e2:c0: d8:2f:f1:63:eb:e5:64:50:f8:fb:d7:78:d0:f2:3a: e9:65:a6:81:fd:ee:c9:9e:51:3d:63:8d:9e:df:80: 19:b0:75:12:b3:70:0f:36:65:f8:4f:05:27:48:88: 1c:a5:b2:7d:5c:3e:bb:59:29:51:03:9e:bd:cc:f9: 95:79:e3:38:29:3d:3b:3c:7e:89:3a:38:37:ba:d9: cf:34:b6:37:b5:7c:d1:65:65:73:e9:f4:6c:9c:59: 1f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:5A:06:C4:D0:41:53:8A:72:14:83:DE:DE:28:C1:DD:D9:1C:66:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1d173c7d-4cc3-3f45-8662-a713821860f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:46:c4:34:4c:90:fd:87:e9:16:a3:b7:20:4f:06:74:94:2c: b6:1e:e6:fe:5a:d1:38:4c:e6:bb:ca:db:b6:4e:c5:bb:f3:55: d5:ec:d2:5b:88:62:0a:e0:76:0b:a7:f4:74:c5:8a:8b:e2:07: 9e:81:2b:a2:ab:e3:ab:61:9b:8b:64:be:cf:c7:d7:b3:7f:71: 72:3b:df:e9:08:be:55:b3:47:ba:3a:03:e6:ef:2a:28:e6:8f: 43:d1:43:25:eb:c5:63:eb:52:9f:f0:57:af:6e:f5:36:9d:6a: 84:5f:c0:bf:71:ba:40:36:29:a5:61:27:c2:14:bd:f1:22:74: 53:22:97:2e:11:77:08:26:cc:65:fb:bc:c4:00:a8:10:c8:9d: 03:38:ba:9e:d5:d1:30:74:b0:0f:1d:c0:4f:71:04:9f:c4:14: 48:2a:16:29:59:55:fa:01:7c:9b:3f:36:72:c9:5f:e8:f3:57: 0e:c7:43:59:63:a9:21:45:d4:c4:5e:f7:14:e0:ef:57:f4:8f: ee:98:2e:d2:1c:75:00:81:53:fb:85:99:cb:25:e7:a7:e0:d3: 8f:2d:57:22:d0:37:f5:d4:03:7b:5d:27:d4:a7:9d:06:a1:54: 3b:29:32:01:8b:9c:9c:0d:4b:8d:8c:43:7b:17:61:3e:fe:64: c0:0b:20:64 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErZNnB1D2h1nyIl7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk NjEwZDEzMjItODM1OC00OWRjLTgyMzMtMmUwMGQ1ZGRmM2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoesa2ZBSXAUyrujv3R4dMkt9XYtrFrj/LSS t2u20THeWklfW9HiQTiQMiDpN2o0iC09IV/D2qKULLBMAGR+Y23Gzro3QLHkREoF rnLL8ExOFO6Gq7/hDQxf/kJtf7BNB/awCSfRCHMiK4CzzmrphbWPT+3uLUmbhPfz 5CV5rPVHB8JD7b+x0eUdzqNbR5kfX4ftdkIrdCUuS+JkfrYBvcXb4sDYL/Fj6+Vk UPj713jQ8jrpZaaB/e7JnlE9Y42e34AZsHUSs3APNmX4TwUnSIgcpbJ9XD67WSlR A569zPmVeeM4KT07PH6JOjg3utnPNLY3tXzRZWVz6fRsnFkfoQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBdaBsTQQVOKchSD3t4owd3ZHGY/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWQxNzNjN2QtNGNjMy0z ZjQ1LTg2NjItYTcxMzgyMTg2MGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAqRsQ0TJD9h+kWo7cgTwZ0lCy2Hub+WtE4TOa7 ytu2TsW781XV7NJbiGIK4HYLp/R0xYqL4geegSuiq+OrYZuLZL7Px9ezf3FyO9/p CL5Vs0e6OgPm7yoo5o9D0UMl68Vj61Kf8FevbvU2nWqEX8C/cbpANimlYSfCFL3x InRTIpcuEXcIJsxl+7zEAKgQyJ0DOLqe1dEwdLAPHcBPcQSfxBRIKhYpWVX6AXyb PzZyyV/o81cOx0NZY6khRdTEXvcU4O9X9I/umC7SHHUAgVP7hZnLJeen4NOPLVci 0Df11AN7XSfUp50GoVQ7KTIBi5ycDUuNjEN7F2E+/mTACyBk -----END CERTIFICATE-----Generated at Sat Aug 23 13:09:48 2025 by rpki-client